cbcvebase.
CVE-2019-10709
published 2019-09-04

CVE-2019-10709: AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially…

PriorityP263critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
11.54%
95.5th percentile
AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call.

Affected

1 ranges
VendorProductVersion rangeFixed in
asusprecision_touchpad——

Detection & IOCsextracted from sources · hover to see the quote

path\\.\AsusTP↗
commandDeviceIoControl IOCTL code 0x221408↗
  • →Monitor for DeviceIoControl calls targeting the \\.\AsusTP device object with IOCTL code 0x221408, which is the specific control code used to trigger the pool overflow in AsusPTPFilter.sys. ↗
  • →Alert on processes opening a handle to \\.\AsusTP (CreateFile with GENERIC_READ|GENERIC_WRITE flags 0xC0000000) from unexpected or unprivileged user-mode processes, as legitimate access should be limited to the driver stack. ↗
  • →Detect oversized input buffers (e.g., 12048 bytes of repeated data) sent via DeviceIoControl to \\.\AsusTP, indicative of a pool overflow attempt against AsusPTPFilter.sys. ↗
  • ·The exploit was tested specifically on Windows 10 RS5 x64; IOCTL behavior or pool layout may differ on other Windows versions, potentially affecting exploit reliability and detection fidelity. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.